This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json) Hash identifier: 7Cd2Q7wDxErp9ZYECMPMsOCfTRp+Z3t0bNwQxkqotmU= Subject key identifier: 00:67:4B:97:5E:DF:6C:F1:75:AF:50:37:25:78:12:9D:A3:9B:E4:F9 Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Certificate serial: 077B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft Manifest number: 0775 Signing time: Tue 16 Dec 2025 21:07:04 +0000 Manifest this update: Tue 16 Dec 2025 21:07:04 +0000 Manifest next update: Tue 23 Dec 2025 21:07:04 +0000 Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: 6h0MB1ZNI70k6IlE+MX5eGJ7Q2kOZaIK54FcvOyAytY=) 2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: 7Is3vb8M4Ael/zSFkVaQ0sGxAVtnbAzSio382bs/guQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 21:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Validity Not Before: Dec 16 21:07:04 2025 GMT Not After : Dec 23 21:07:04 2025 GMT Subject: CN=6941c9f8-fc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:0f:66:b9:3d:ca:8d:87:28:3e:5b:e9:0e: 4b:14:74:44:7f:31:04:66:77:f7:71:a2:a2:2f:55: 55:36:0e:d2:49:94:a5:e5:f5:75:af:82:f0:89:4d: f2:e8:71:4a:7f:6b:c4:36:b6:cd:f3:d0:e4:1d:49: b5:09:9a:83:96:17:49:3a:a5:b8:69:f1:1c:f8:25: 3b:eb:7a:b0:16:b1:bc:0e:23:28:f6:d3:7c:94:2c: 59:73:61:3c:c9:9c:5d:e9:1e:07:9a:5b:aa:2d:00: ba:1a:f4:ef:8d:f6:94:2d:39:63:4d:34:6c:0e:5c: 9c:bf:f8:5e:f4:b8:42:e7:02:f9:01:74:67:44:7f: 86:04:6d:5a:44:f0:8f:7b:8b:5c:bb:f6:b7:1d:39: bc:79:22:4c:40:55:b3:65:7b:90:de:cb:82:00:9f: 42:65:e0:cb:fe:85:7c:ec:bd:a7:3c:97:56:58:c8: ef:15:17:f6:1d:1c:b1:d9:69:cb:f7:39:b0:ad:e8: a7:1d:2b:4c:4d:34:f9:78:43:04:d3:52:06:33:12: 22:ff:10:e8:ac:18:55:84:e9:c7:da:f5:bb:de:0d: 19:a4:e1:0b:e6:db:55:a5:4b:a2:f0:30:92:f4:36: ec:6f:a5:a6:27:2d:c6:88:18:18:61:0f:ee:54:a5: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:67:4B:97:5E:DF:6C:F1:75:AF:50:37:25:78:12:9D:A3:9B:E4:F9 X509v3 Authority Key Identifier: keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a3:9b:9c:b9:a7:69:8b:2b:f6:00:31:c5:2b:64:64:4b:e8: a0:da:f0:9c:b0:f9:0c:bb:d9:9e:26:f1:2b:ff:fa:e4:ec:0d: a9:e3:60:35:52:f8:1a:97:76:73:3f:5c:ea:00:fb:b8:07:10: 6c:f9:38:e5:c5:df:92:c0:61:5a:82:23:c2:e2:94:ea:05:e2: 16:7b:eb:ef:20:81:f3:a9:29:75:71:a5:ee:d4:2e:27:9e:cd: 77:46:55:39:f5:02:dc:45:55:3f:c0:59:2d:19:00:49:d3:a1: 89:d7:4a:1c:8b:f7:4c:da:4a:04:12:c9:64:dd:96:6e:f6:e0: 9c:ec:f5:7f:42:8b:04:b2:14:29:43:50:63:db:22:48:ea:df: 35:d6:c1:10:49:29:3a:40:0d:6e:a8:9b:6b:ed:f5:9e:63:07: a9:51:24:56:da:6c:2d:1e:22:6f:9d:af:c5:42:b8:0d:7b:ea: c8:7a:15:20:0b:32:14:5f:2d:0c:2f:1a:16:c4:17:7b:a1:da: d3:b6:0c:24:ad:b1:b8:a4:2e:c8:e6:85:8c:ad:90:ac:3a:c1: f4:79:82:6d:6a:4f:b7:53:aa:36:21:85:53:e7:79:20:15:eb: cc:67:73:de:3c:02:d8:9c:15:1b:0e:25:63:67:9d:29:b0:83: b1:ad:78:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4QzQxMTAvBgNVBAUTKEFEMjFFOTVBMjYxQTJFODAyNUUzM0NBOTU0ODI1QzE0 NzBCM0I3QTMwHhcNMjUxMjE2MjEwNzA0WhcNMjUxMjIzMjEwNzA0WjAYMRYwFAYD VQQDDA02OTQxYzlmOC1mYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqoPZrk9yo2HKD5b6Q5LFHREfzEEZnf3caKiL1VVNg7SSZSl5fV1r4LwiU3y 6HFKf2vENrbN89DkHUm1CZqDlhdJOqW4afEc+CU763qwFrG8DiMo9tN8lCxZc2E8 yZxd6R4HmluqLQC6GvTvjfaULTljTTRsDlycv/he9LhC5wL5AXRnRH+GBG1aRPCP e4tcu/a3HTm8eSJMQFWzZXuQ3suCAJ9CZeDL/oV87L2nPJdWWMjvFRf2HRyx2WnL 9zmwreinHStMTTT5eEME01IGMxIi/xDorBhVhOnH2vW73g0ZpOEL5ttVpUui8DCS 9Dbsb6WmJy3GiBgYYQ/uVKVHiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABnS5de 32zxda9QNyV4Ep2jm+T5MB8GA1UdIwQYMBaAFK0h6VomGi6AJeM8qVSCXBRws7ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhDNC81MzJGRENEQzNF MTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxvQWw0enlwVklKY0ZIQ3p0 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSHBXaVlhTG9BbDR6eXBWSUpjRkhDenQ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDhDNC81MzJGRENEQzNFMTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxv QWw0enlwVklKY0ZIQ3p0Nk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAo5ucuadpiyv2ADHFK2RkS+ig2vCcsPkMu9meJvEr//rk7A2p42A1 Uvgal3ZzP1zqAPu4BxBs+Tjlxd+SwGFagiPC4pTqBeIWe+vvIIHzqSl1caXu1C4n ns13RlU59QLcRVU/wFktGQBJ06GJ10oci/dM2koEEslk3ZZu9uCc7PV/QosEshQp Q1Bj2yJI6t811sEQSSk6QA1uqJtr7fWeYwepUSRW2mwtHiJvna/FQrgNe+rIehUg CzIUXy0MLxoWxBd7odrTtgwkrbG4pC7I5oWMrZCsOsH0eYJtak+3U6o2IYVT53kg FevMZ3PePALYnBUbDiVjZ50psIOxrXgY -----END CERTIFICATE-----Generated at Wed Dec 17 17:50:08 2025 by rpki-client